@kbingham

Using SPIRE as a Trusted Authority for OpenZiti Identities

Mar 23 · 5 min read · Introduction Identity management is central to modern network security. This post shows how to use short‑lived X.509 client certificates from SPIRE — the reference runtime for SPIFFE (Secure Productio

Easy Steps to Install a Private VPN on Linux with zrok

Aug 2, 2024 · 2 min read · The great thing about the zrok-share.service is that it comes with the zrok binary and is always on in the background, so it's a good fit for a reliable VPN connection. Let's install the service and configure it to auto-start after a reboot. curl -sS...

Jitsi, meet zrok

Jul 31, 2024 · 4 min read · Jitsi Meet is an open-source video conferencing server. I've wanted to run Jitsi behind zrok and someone asked about it today in the forum and we got it working! Here's how I conveniently self-host Jitsi with zrok. Why zrok? zrok.io makes it easy to ...

Extend Access to a Private S3 Bucket Using Python

Jul 23, 2024 · 2 min read · A private S3 bucket protects against a data leak by denying all public access. This approach moves access control from the public S3 API to the network layer. We can use OpenZiti's cryptographic identity and attribute-based policies to securely exten...